Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
File: CJu7CaX772E1wtkgvye7YfXC4J0.mft (raw, json)
Hash identifier: Kd0cxOOmSl7LaXqwnepapEtUMeJarUHY8avxnNFAr7c=
Subject key identifier: 6D:8B:E1:BD:51:0B:8B:B6:EB:A0:9F:92:F3:75:D1:46:9E:BC:DF:6B
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Certificate issuer: /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial: 01A0C47BF58F84DFABD8E69E616FBCF958B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 15:00:53 +0000
Manifest this update: Mon 21 Sep 2026 15:00:53 +0000
Manifest next update: Tue 22 Sep 2026 15:00:53 +0000
Files and hashes: 1: CJu7CaX772E1wtkgvye7YfXC4J0.crl (hash: PEH8B0KTovTDhqr4Oc+cg6GqC2AOqEn42zK0A7hVKkc=)
2: OHiJ9XzBUi42gNdFbFSonns_rq0.roa (hash: 5izRR616Szlh4ynpWzSXWkX0E9KgDJBqg2wIQA5yWeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:f5:8f:84:df:ab:d8:e6:9e:61:6f:bc:f9:58:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Validity
Not Before: Sep 21 15:00:53 2026 GMT
Not After : Sep 22 15:00:53 2026 GMT
Subject: CN=6d8be1bd510b8bb6eba09f92f375d1469ebcdf6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:69:a9:b2:44:53:55:3b:48:57:ee:1d:c8:
42:71:fa:93:85:6a:6c:96:a8:8a:1d:72:cb:94:0d:
8b:0a:9b:7d:3a:ec:34:98:ff:cd:81:b6:f5:bb:3c:
3c:ca:47:88:42:28:f5:09:32:35:25:e2:97:95:b4:
21:79:8c:a7:73:2b:46:16:34:7a:ac:b1:7b:8e:f0:
9f:64:38:87:d5:9f:83:19:49:55:68:96:d6:8e:ac:
c6:fa:b9:b1:59:0c:bd:65:00:ca:23:80:f3:11:6c:
2b:38:37:2a:c4:95:93:8d:08:47:d9:27:b1:3a:e2:
b2:11:4c:1d:2e:9e:3d:90:ce:cd:0e:d6:60:17:33:
2e:33:63:bb:d8:ca:df:b3:18:e5:3a:98:1e:eb:78:
84:6a:4e:fe:ef:0e:8e:f7:05:2c:41:23:8e:65:1a:
b2:29:42:89:95:d3:54:e4:3d:2e:dc:ea:4e:b5:dc:
eb:fa:6c:a9:b5:f6:ce:82:f5:fe:0f:31:3f:2c:75:
3c:cb:e8:07:e5:8e:1b:77:fc:36:ab:c9:70:d2:6c:
67:77:9a:b6:5f:9c:7b:3b:da:a5:9c:38:af:02:8a:
58:12:d5:f7:b8:2c:7a:48:f6:08:33:59:5a:1f:cd:
6d:cb:19:4d:81:7e:61:ec:7a:46:d6:19:59:c7:56:
61:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8B:E1:BD:51:0B:8B:B6:EB:A0:9F:92:F3:75:D1:46:9E:BC:DF:6B
X509v3 Authority Key Identifier:
keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:18:36:c7:d1:a7:f7:65:39:49:b4:43:66:4b:17:e9:96:7e:
4b:7b:e0:4e:9a:d0:0b:99:22:5f:64:74:9f:07:81:d4:54:41:
5c:ad:96:ad:88:e2:e1:e3:49:3f:22:dd:17:cb:e3:13:d8:3c:
a2:ac:89:b7:df:19:99:ba:fb:f9:26:79:40:19:5a:f9:d2:3b:
6a:38:72:18:e8:6a:fe:6a:73:57:cb:66:e4:f7:ac:20:08:63:
23:a2:bb:d9:84:d7:4d:f9:82:1a:44:27:fe:3f:d8:d6:e4:55:
84:5f:9b:5f:7c:4d:04:d1:e7:31:ab:4e:2a:b3:85:7b:f9:e9:
4d:4b:64:84:40:dd:2e:04:d8:2d:de:b9:00:03:46:ff:a7:95:
44:92:f8:df:37:5c:25:30:10:08:1d:cb:48:38:4c:65:ef:0f:
0e:02:cf:a1:30:b3:a3:dd:30:42:82:03:09:c1:60:b3:42:0f:
56:cd:6d:d2:25:d9:53:3b:6c:f2:22:45:b2:37:fd:b1:a7:50:
ee:b1:d2:8f:18:62:84:33:ef:c6:e9:e9:6d:c1:00:75:c9:94:
12:ed:5b:9d:ab:fe:64:c6:5b:de:27:36:92:ac:19:63:41:5c:
56:4d:2f:dd:ef:cf:9d:4d:fd:a3:99:58:76:f4:ed:f7:cb:06:
71:97:41:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:18:35 2026 by rpki-client